Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

magento/magento2

              2.4-develop @ 3a6b966
            

Fixes

CVEs

CRITICAL

Peak severity

42.9%

Coverage

Highlights

Auth Bypass: 27 prior fixes. Scrutinize any change in this area.

app/code/Magento/Authorization/Model/Acl/Loader/Rule.php: most-fixed (4 issues). Treat as high-risk during review.

55 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple fixes address missing ACL rules being implicitly allowed, enabling privilege escalation. The pattern of deny-by-default is applied inconsistently across roles and resources.

Path Traversal: Path canonicalization and separator handling are repeatedly fixed, indicating a systemic weakness in path validation that allows escaping the intended directory. Sibling code paths may miss the same canonicalization.

Auth Bypass: GraphQL resolvers for products and categories lacked permission filtering, exposing restricted data. Fixes added context-based checks, but sibling resolvers may still miss these.